Universal Life Insurance Public Co Ltd.
€3,500
Insufficient data processing agreement
Datum der Entscheidung
1. Januar 2022
Behörde
Cypriot Data Protection Commissioner
CY
Sektor
Finance, Insurance and Consulting
Land
CY
Recht
GDPRStatus
FINALBeschreibung
The Cypriot DPA has imposed a fine of EUR 3,500 on Universal Life Insurance Public Co Ltd. The processor of the data controller had suffered a data breach in which personal data of customers were mistakenly disclosed to other customers. During its investigation, the DPA found that the controller had failed to contractually regulate the relationship with its processor. The DPA concluded that the controller had contracted a processor without ensuring that the processor provided sufficient guarantees for the implementation of appropriate technical and organizational measures to protect personal data.
Juristische Zitate
Art. 24 (1)Art. 28 (1)
Probleme und Verstöße
Insufficient data processing agreement